{"id":"CVE-2026-101844","aliases":[],"title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests).","titleSource":"oracle","descriptionSource":"oracle","products":[{"vendor":"Oracle Corporation","name":"Oracle Concurrent Processing","platforms":[],"versions":[{"version":"12.2.3","status":"affected","lessThanOrEqual":"12.2.15","versionType":"custom"}],"source":"oracle","url":"https://www.cve.org/CVERecord?id=CVE-2026-101844"}],"remediation":[],"description":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Concurrent Processing.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Concurrent Processing accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).","severity":"low","score":3.1,"published":"2026-10-20T21:23:17.562Z","modified":"2026-10-27T11:37:40.084Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"sources":[{"name":"CVE","id":"CVE-2026-101844","modified":"2026-10-27T11:37:40.084Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-101844"}],"assessments":[{"source":"oracle","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","score":3.1}],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T23:20:36.067Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}